• Hey Guest. Check out your NeoGAF Wrapped 2025 results here!

Hackers can unban themselves and ban you from PSN.

Status
Not open for further replies.
Lord Error said:
No it's not, see one of the posts above where they tried changing the code and it didn't work. It's based on a whitelist most likely.

You mean the one where the guy tried changing his ID to a random one? Yeah ... read the rest of my post.
 
Alts said:
Let's do some more math. One web request needs to be made to get your account banned. Let's assume you're on a freakishly good connection, and it takes only 50 miliseconds to get a response. How long would it take for you to wipe out all IDs?

~ 2 * 10 ^ 21 years. That's 146170679423x the estimated age of the universe.
Yeah its a large number but who would run an attack like this. mad slow yo! lol . My grandma would not even run an attack like this.

I agree randomly running through is not going to work( i did not see the size initially). Lets just hope they can't find legit ones some other way.
 
Jobiensis said:
I don't disagree with you, but I would presume you would run requests in parallel. Waiting for the response from your one request would be a freakishly slow way to do this.

Valid counter. I overlooked that.
 
MThanded said:
Yeah its a large number but who would run an attack like this. mad slow yo! lol

I agree randomly running through is not going to work( i did not see the size initially). Lets just hope they can't find legit ones some other way.
I sure hope Sony secured their databases...
 
MThanded said:
Yeah its a large number but who would run an attack like this. mad slow yo! lol . My grandma would not even run an attack like this.

I agree randomly running through is not going to work( i did not see the size initially). Lets just hope they can't find legit ones some other way.

I can only think of a MITM attack to obtain IDs. That or a breach of some sony database.
 
iam220 said:
You mean the one where the guy tried changing his ID to a random one? Yeah ... read the rest of my post.
Yeah, for the rest I was saying pretty much the same in one of the previous posts, I agree there.
 
Alts said:
Let's do some more math. One web request needs to be made to get your account banned. Let's assume you're on a freakishly good connection, and it takes only 50 miliseconds to get a response. How long would it take for you to wipe out all IDs?

~ 2 * 10 ^ 21 years. That's 146170679423x the estimated age of the universe.

It's no use, people will believe a fake picture over your proof because they want to believe it. It's not much different then Bill O'reilly thinking the tides are controlled by God, but we know it's actually the moon.

I say let the insanity go on and sit back and laugh.
 
No one should be worried until your console gets banned and you were innocent. The truth of the matter is there is nothing you can do about it. Same as if amazon got hacked and your credit card info got leaked. As a user there is nothing you can do. Just keep it moving.

I know i don't care but I do like talking security.
 
Noshino said:
Well, not all hackers, but certainly the ones involved, and that support geohotz, yah, I would certainly blame them.

Whether they were doing it to for their own good or not, I don't care, but they should have kept it between themselves. Breaking the security system and making it public make things like this (probably) possible.

Hackers in general that work and keep things to their own (or make their research available in a more educated/reasonable matter) are cool.

The ones on the PS3 scene? sorry, but I have no sympathy for them.

Actually, by even suggesting that they can do this, the hackers have now reversed any kind of goodwill and support that others may have had for them so far. This actually paints them as a bunch of selfish assholes who just want the fame and the fun of making others miserable so they can do whatever they want. Those who didn't want to see them go to jail may actually want them to see thrown to jail for good long while now.
 
I still feel like either this thread needs to be locked or the OP and title changed to show that this is mainly fear mongering BS from unreliable sources.
 
Duane Cunningham said:
Deep in my bones, I can feel a Kotaku writer reading this thread RIGHT NOW.

oh this will end up on there in big bold letters, if it already isn't. Dumbass videogame "journalism" at its finest.
 
Replicant said:
Actually, by even suggesting that they can do this, the hackers have now reversed any kind of goodwill and support that others may have had for them so far. This actually paints them as a bunch of selfish assholes who just want the fame and the fun of making others miserable so they can do whatever they want. Those who didn't want to see them go to jail may actually want them to see thrown to jail for good long while now.
sure, if you think these are the same exact people, but that's like presuming that everyone with CFW is a pirate, and that everyone on GAF is a sony fanboy.

some hackers opened up the PS3. some hackers might have found a way to ban other people from PSN.

unless those two groups of hackers are the same, you shouldn't, logically, reconsider your opinion of the first group based on the actions of the second.

it's sort of like saying 'egyptians raped a reporter' and then 'egyptians save a reporter from being raped'. we aren't talking about the same egyptians... and neither action says anything about egyptians overall.
 
Danielsan said:
I doubt it. It's not that easy to create a legit console id generator. If it was that easy people hackers would also have Xbox Live and Microsoft Point generators out there.

Xbox Live and Microsoft Points are essentially hack proof because the possible combination of letters and numbers is so large that it's a 36 digit number. You couldn't even begin to brute force something that big.

Are PS3 console ID's as obtuse and as long as those DLC numbers? Or do PS3 console ID's follow a more regular pattern that would make a brute force solution very easy?
 
Alts said:
I can only think of a MITM attack to obtain IDs. That or a breach of some sony database.

Doesn't this also assume that Sony will be banning consoles the moment a compromised system touches PSN? I don't see any reason they'd have to do it that way, they could apply further diligence in finding out if that ID actually belongs to a PS3. Hell, they could do it the way MS used to do it and run a ban-wave only at certain intervals, which would give them a better chance to apply heuristics to find fakes.
 
RustyNails said:
How did this happen? Don't you need super admin status to ban other systems? I'm bamboozled at this turn of events.

you just need to spoof the console id, and poof, it is just the subject title says, hackers can unban systems and ban systems at will
 
RustyNails said:
How did this happen? Don't you need super admin status to ban other systems? I'm bamboozled at this turn of events.

It didn't. Some stupid kid wrote a GUI to get attention.
 
Who are the hackers?

It really isn't very productive to start lumping together people like that, it's about as correct as saying GAFers never have sex. There are a lot of people with different goals and abilities.

Edit:Responding to replicants post, but beaten by a mile by plagiarize
 
MThanded said:
No one should be worried until your console gets banned and you were innocent. The truth of the matter is there is nothing you can do about it. Same as if amazon got hacked and your credit card info got leaked. As a user there is nothing you can do. Just keep it moving.

I know i don't care but I do like talking security.

Well, if my card info gets stolen, it is actually not that hard to report those charges to your credit card company.

In the case of an innocent person having his/her PS3 get banned by this, I don't know/think he would be able to do much to have it fixed.
 
plagiarize said:
sure, if you think these are the same exact people, but that's like presuming that everyone with CFW is a pirate, and that everyone on GAF is a sony fanboy.

some hackers opened up the PS3. some hackers might have found a way to ban other people from PSN.

unless those two groups of hackers are the same, you shouldn't, logically, reconsider your opinion of the first group based on the actions of the second.

it's sort of like saying 'egyptians raped a reporter' and then 'egyptians save a reporter from being raped'. we aren't talking about the same egyptians... and neither action says anything about egyptians overall.

It doesn't matter. Humans are not wired to do logical thinking when they feel threatened. Basically to most people, all they know is that a bunch of hackers try to ruin their fun just because these hackers want to do whatever they want. It is actually in the interest of other hackers to prevent this because it's not helping them in any way.
 
Noshino said:
Well, if my card info gets stolen, it is actually not that hard to report those charges to your credit card company.

In the case of an innocent person having his/her PS3 get banned by this, I don't know/think he would be able to do much to have it fixed.
There is still nothing you can do about it. Whether is more annoying or not there is really nothing you can do.
 
Let's think of it another way, and assume this is easily doable, and hackers can spoof legitimate console ids and match them up with the correct mac addresses, with 100% success. In that case, I'd think Sony would just stop banning consoles, with no reliable way to distinguish hackers from legitimate users. Why ban consoles, if hackers can easily unban themselves, while unintentional banning of legitimate users will just lead to customer support headaches and possible lawsuits? Of course, PSN will be run amok with hackers and cheaters, but that's the consequence.
 
darkwing said:
you just need to spoof the console id, and poof, it is just the subject title says, hackers can unban systems and ban systems at will
No they can't this is all theoretical and, judging by the math in this thread, as close to impossible as you can get.
 
My dads friend works at Sony and she said that Sony starts counting the guids from zero so you only need 50 ms * 47 million to ban all consoles
 
George Claw M.D. said:
Let's think of it another way, and assume this is easily doable, and hackers can spoof legitimate console ids and match them up with the correct mac addresses, with 100% success. In that case, I'd think Sony would just stop banning consoles, with no reliable way to distinguish hackers from legitimate users. Why ban consoles, if hackers can easily unban themselves, while unintentional banning of legitimate users will just lead to customer support headaches and possible lawsuits? Of course, PSN will be run amok with hackers and cheaters, but that's the consequence.

I think this is what the hackers want Sony to think so Sony wouldn't ban them. So it's now up to Sony to increase their security and make sure they don't ban the wrong people. Multiple identification of a console and cross-reference checking must be done before banning.
 
George Claw M.D. said:
Let's think of it another way, and assume this is easily doable, and hackers can spoof legitimate console ids and match them up with the correct mac addresses, with 100% success. In that case, I'd think Sony would just stop banning consoles, with no reliable way to distinguish hackers from legitimate users. Why ban consoles, if hackers can easily unban themselves, while unintentional banning of legitimate users will just lead to customer support headaches and possible lawsuits? Of course, PSN will be run amok with hackers and cheaters, but that's the consequence.

Exactly, best case scenario, this is all BS, worst case scenario Sony works on new ways to ban ps3 hackers without collateral damage after seeing the coming ban wave backfire...
 
PetriP-TNT said:
My dads friend works at Sony and she said that Sony starts counting the guids from zero so you only need 50 ms * 47 million to ban all consoles
ha you got us trollface.gif
 
darkwing said:
but the subject title says hackers can
r+kelly.jpg


believe.
 
For some reason I immediately thought that this story was created so pirates/cheaters can claim that their bans are illegitimate.
 
Replicant said:
Actually, by even suggesting that they can do this, the hackers have now reversed any kind of goodwill and support that others may have had for them so far. This actually paints them as a bunch of selfish assholes who just want the fame and the fun of making others miserable so they can do whatever they want. Those who didn't want to see them go to jail may actually want them to see thrown to jail for good long while now.
I don't.

It would be incredibly stupid to make a rash generalization on a large group of people with very different motives ("the hackers") based solely on this device if in fact it does exist for multiple reasons.

What country does this guy live in? Perhaps we should start a crusade against them, too. I'll get my torch and pitchfork.
 
Proteus IV said:
Exactly, best case scenario, this is all BS, worst case scenario Sony works on new ways to ban ps3 hackers without collateral damage after seeing the coming ban wave backfire...

There's no banwave backfire. What we have so far are people who are rightfully banned pretending that they don't know why they were banned in the first place. Unconvincingly. Like by acting that their brother/friend/cousins/neighbor/fuckbuddy, etc just borrowed their console and all of a sudden it's not working.

And also:

Quixzlizx said:
For some reason I immediately thought that this story was created so pirates/cheaters can claim that their bans are illegitimate.

Pretty much.
 
MThanded said:
This thread should probably be locked.

I agree. From what I've read, this is a 'theory' that hasn't even been shown to even be possible at this point. There are no workable tools and furthermore, it definitely can't use just a random number to try to brute force it, because there has already been a console id spoofer released that fails authentication to PSN when using a random call/answer. There are way too many variables out there, and unless you are going around giving your console id # to other people (or had it picked up via a script for example included in a custom firmware you previously downloaded), there's 0 chance of this working.
 
darkwing said:
but the subject title says hackers can

how many more times are you going to saying the same thing? jesus christ do you have aspergers? I made a thread based on what i read, stop crying so much, if its fake its fake and if its real were fucked.
 
Status
Not open for further replies.
Top Bottom